This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA specifiations and limitations

Hello,We are using Panorama to manage all our PA devices. Depending on our needs, we use plateforms from PA500 to PA5050. Last week we tried to commit a change to a PA500 and we get the message : address group limit exceeded !!!! At the moment we have 253 address groups. So the limit seems to be 250 address groups for a PA500.Could you give us ...

bdaussin by • L0 Member
  • 5572 Views
  • 7 replies
  • 0 Likes

Internet Performance issues

Good Morning EveryoneWe recently installed a new PA-500 with OS 3.1.4 loaded. URL Filtering was disabled. After enabling URL filtering internet speed degarded to the point of it takes 10min to open a site like google.... hiting refresh once or twice will open the site imediatly without any problems. Sometimes sites only gets loaded half. After r...

u7285 by • Not applicable
  • 7729 Views
  • 10 replies
  • 0 Likes

ssl traffic blocking after enabling qos for youtube

HiI create qos rule for youtube. create Qos profile with 2 MB in class 8 and assigned to the interface.Also create security rule apply this class only to youtube application.After enabling the profile to interface all other ssl traffic is freezing like gmail etc.The device we configuring in PA-4020 with PAN-OS 4.0.1 and the mode of installation...

shabeerc by • L2 Linker
  • 3797 Views
  • 4 replies
  • 0 Likes

Resolved! Manipulating application groups from command line

Hi all, Does anybody know how to replace the contents of an application group from the command line please?Our application groups change frequently so I would prefer to use command line over slow guiThe following command will add the listed applications to "myappgroup" but what I really want is to replace what is currently in the group with thes...

DavePalo by • L4 Transporter
  • 5602 Views
  • 3 replies
  • 0 Likes

cannot access website login,no logs to help

Hi All,i am trying to login to www.hoovers.com fromhttp://subscriber.hoovers.com/H/login/login.htmlThe page comes up but i cannot see the login fields.I have enabled alert on all url categories and also put *.hoovers.com/* in the allowed list, but i cannot see anything in the logs that will help me.when i connect directly to the internet, i can ...

Help setting up a return route

Hi,I am in the process of migrating internet connections, at the moment we have a PA-500 with 3 active internet connections, traffic is routed between different connections using policy routing. This is fine for outbound traffic, however inbound does not work as the traffic attempts to return via the default gateway.There seems to be no implemen...

andyyps by • Not applicable
  • 5988 Views
  • 5 replies
  • 0 Likes

Resolved! PanOS 4.0.3 - CLI options missing

HiWe seem to been missing several set options (e.g. set profiles). We recently upgraded to 4.0.3 but this is the first time I've looked to set anything like this since the upgrade.The user account I am using has full read/write access.Are we hitting a bug?RegardsJim

martji by • Not applicable
  • 4947 Views
  • 6 replies
  • 0 Likes

Captive Portal - One Time Password

Hi All,Is it possible to use a 2 Factor Radius OTP solution with captive portal, I have managed to get a solution set up for the SSL VPN which once you have entered your username and password you get another screen which prompts you for the OTP which is either sms or emailed etc.However when using the same radius authentication profile on captiv...

Resolved! Dead sites issue

Hi All,I have a site that is categoried under Dead sites by birghtcloud, as well as the local-db of PaloAlto.the site ishttp://qw131.qhit.net/osehp/quote.cgi?F=template/popdetailquote&QCODE=1944&MKTN=O&mode=Iso on my URL Filtering I allowed *.qw131.qhit.net/* , mind you Dead sites is still set on block.But my assumption was PaloAlt...

Mgmt Traffic through VPN Tunnel

I have a fairly straightforward network topology for a firewall at a remote datacenter with one little catch. The PAN's revenue interfaces are an Internet interface, an internal interface, a DMZ interface, and a device management network. The catch is the PAN's MGMT interface lies on the device mangement network for which it is also the default ...

cosx by • L2 Linker
  • 3242 Views
  • 1 replies
  • 0 Likes

Custom Report and User ID

We are running PA 2020 with Software version 3.1.6. We noticed when we run custom report with user ID , the logs mix-up Source Host address. For exampleA week ago I logged in with a computer name Laptop 1 for a day , and past 6 days I logged in with a computer name Laptop 2. This morning when I ran a report with my user ID just for yesterday , ...

ssarcar by • Not applicable
  • 3244 Views
  • 3 replies
  • 0 Likes

translation vs url block/threat block

Hi,I just came across something quite interesting. A user needs to be able to translate a decent url, but by default translation is blocked by PaloAlto. Once you configure PaloAlto to allow translation, you can actually go into google translate, and translate an adult website into another language and view it within Google translate's page. My q...

Load Balancing Using Dynamic Routing

Is it possible for the PAN to load balance sessions across two equal cost default routes establish in an OSPF process that the PAN firewall participates in?If not, can this be accomplished through BGP?We have one ISP with two connections to the Internet, each with it's own router. We would like to participate in dynamic routing and accomplish s...

nsteffens by • Not applicable
  • 3078 Views
  • 1 replies
  • 0 Likes

Traffic forwarding based on security policy?

We have been trying to troubleshoot an issue for a couple weeks now. We seem to have found the issue, but it doesn't make sense. I'm hoping someone can shed some light on this:First off, we have a pair of PAN-4020's in HA @ 3.1.9.I'm going to oversimplify the situation, but I think the logic will hold:Segments A, B and CSegment A is a user seg...

bhelman by • L2 Linker
  • 4273 Views
  • 4 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks